Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
File: k89OeSfhBJZOTJb0QWSc40F0zjo.mft (raw, json)
Hash identifier: yDMA1PhF6Qz83AlLqXIaypE5Ml+51K5GZ/o0Hv/SHEE=
Subject key identifier: 11:0C:22:71:AA:9D:C8:B6:DB:85:33:76:E4:66:4A:49:D9:70:24:6A
Authority key identifier: 93:CF:4E:79:27:E1:04:96:4E:4C:96:F4:41:64:9C:E3:41:74:CE:3A
Certificate issuer: /CN=93cf4e7927e104964e4c96f441649ce34174ce3a
Certificate serial: 019D277225FEDB6AE060AE544938E4CAE12B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 00:01:25 +0000
Manifest this update: Thu 26 Mar 2026 00:01:25 +0000
Manifest next update: Fri 27 Mar 2026 00:01:25 +0000
Files and hashes: 1: a-RfJEkqSAZCcoPr0GaKWgyFyUY.roa (hash: jOtVSSPZObpK8XqzAlQVoc0c5TSMX2XvXMtPwq4gvlk=)
2: k89OeSfhBJZOTJb0QWSc40F0zjo.crl (hash: 3778V/v+5Y9sPgF9w/rGyXKb2wR35vgBOwvX+DNMm9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:25:fe:db:6a:e0:60:ae:54:49:38:e4:ca:e1:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93cf4e7927e104964e4c96f441649ce34174ce3a
Validity
Not Before: Mar 26 00:01:25 2026 GMT
Not After : Mar 27 00:01:25 2026 GMT
Subject: CN=110c2271aa9dc8b6db853376e4664a49d970246a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:21:2a:31:b7:ed:d1:e3:b1:e2:8e:b1:a3:1e:
81:92:46:d4:0f:f7:f4:f3:c4:9e:9d:25:33:0e:cf:
33:b0:c3:41:f6:af:c9:2f:8f:9d:ba:96:ad:e4:55:
f8:4c:c8:cf:13:bb:24:78:65:0b:be:bf:5a:a1:72:
db:a5:0a:b3:a4:71:01:2d:01:6a:a3:73:1c:5e:bf:
ad:c0:ea:57:bb:61:cc:19:a4:70:03:f4:d3:91:8c:
54:1c:69:fd:f3:5c:8f:22:9c:d1:c3:06:bb:07:71:
e6:17:9f:f9:0a:9d:6b:1c:af:63:de:c0:d7:25:19:
0d:d9:4e:bc:81:01:af:5b:a8:85:5e:05:54:20:01:
57:0d:f1:c2:6f:df:bd:03:84:17:11:2d:fc:68:85:
91:ce:75:04:62:5d:04:61:2c:bf:ac:90:71:3b:f7:
c7:5c:05:11:28:a7:46:ff:56:a9:8e:d9:57:49:a2:
42:8d:19:92:24:a1:4a:2f:e7:b8:ef:6b:f8:84:e7:
01:86:f0:28:9c:2c:aa:b2:1d:46:92:32:d8:cd:f7:
0e:74:1e:fb:23:16:06:07:ab:50:9b:b5:fe:94:02:
e2:34:59:b2:13:b5:17:cc:f9:47:91:d9:9e:43:15:
7e:1d:17:21:21:fc:bf:9a:b9:d5:31:3e:be:4e:f8:
03:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0C:22:71:AA:9D:C8:B6:DB:85:33:76:E4:66:4A:49:D9:70:24:6A
X509v3 Authority Key Identifier:
keyid:93:CF:4E:79:27:E1:04:96:4E:4C:96:F4:41:64:9C:E3:41:74:CE:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:7a:b3:18:b2:44:d2:e9:6e:f1:77:fe:0d:e9:c7:fd:6a:4a:
8d:04:c3:e4:d8:f1:06:36:ff:d4:a0:94:97:f9:02:f5:18:9a:
ea:a3:b0:c9:f5:76:ec:02:a8:a5:30:a7:84:f0:1f:10:63:8e:
3b:2f:c3:01:50:21:e3:c3:8e:4c:ae:d1:9a:72:1d:8a:d1:e9:
9b:ab:d9:ad:80:43:0e:e1:21:07:06:dc:c0:ed:e6:f0:4e:76:
fd:d9:fb:10:08:6c:a0:f9:2f:d3:5e:35:a5:83:fc:74:a0:11:
43:d7:2f:8a:21:ad:c9:7b:6f:9e:01:5f:95:8a:87:fa:e9:a6:
e6:d1:5c:47:18:55:b1:f8:e1:7d:f8:41:ff:74:4e:29:28:15:
c5:55:16:6c:f8:c4:3f:61:f1:2e:9a:d9:fc:c2:03:f3:7b:31:
b4:fd:18:83:83:ef:f5:39:95:4d:a8:33:c9:ba:97:82:75:35:
db:aa:0e:cf:6b:23:1a:e2:6b:fc:0c:72:cd:2b:d6:ec:45:4c:
f8:d8:cf:e4:41:5b:8c:79:9f:16:38:79:82:ac:ab:93:c9:6d:
d3:1b:b6:4b:4c:c6:53:d0:ec:c4:30:c5:cf:96:d6:0c:41:82:
c5:43:1b:20:3e:b8:77:0e:b8:08:33:6b:9e:3f:8a:ec:dc:9a:
2f:5f:f0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:42:20 2026 by rpki-client